
New details indicate 116,500 rsETH were minted through a vulnerability, with most used on Aave to borrow ETH and the attacker extracting 106,466 ETH worth about $250 million.
Updated reporting says the KelpDAO incident involved 116,500 rsETH minted through a vulnerability, resulting in losses estimated at $293 million. Most of the rsETH was deposited into Aave to borrow ETH, while a smaller portion was sold directly for ETH. The attacker ultimately obtained 106,466 ETH worth about $250 million. Earlier updates said Aave froze rsETH markets on V3 and V4, stated its own contracts were not attacked, removed borrowing capacity for rsETH, and began reviewing borrowing activity and potential bad debt linked to the exploit.